Privacy Policy — SkillFlow

Last updated: April 22, 2026

This Privacy Policy describes how SkillFlow ("the App") collects, uses, and protects your personal information when you use our online learning platform.

1. Information We Collect

• Full name and email address (for account registration)
• Phone number (for OTP verification and account linking)
• LINE User ID (when linked via LINE OA @skillflow)
• Video watch progress (lesson ID, seconds watched, completion status)
• Course enrollment records (course ID, enrollment date, expiry date)
• Payment slip images (uploaded voluntarily for course purchase verification)
• Device information and IP address (for security and error logging)

2. Device Permissions

• Internet: Required to stream video lessons and communicate with our servers.
• Storage (Videos/Files): Used only when the teacher uploads lesson videos from their device. Videos are transmitted to our server and not stored permanently on the device.

3. How We Use Your Information

• Authenticating your identity and managing your account
• Verifying course enrollment before granting access to paid content
• Saving and displaying your video watch progress
• Processing payment slip verification by administrators
• Sending notifications via LINE OA after enrollment approval or rejection
• Displaying your name as a watermark on video content (anti-piracy measure)
• Sending error reports to our internal monitoring system

4. Video Content Protection

All lesson videos are encrypted using AES-128 encryption and stored on Cloudflare R2 cloud storage. Encrypted video segments cannot be played without a valid, time-limited decryption key. Access is verified on every request. Screenshots and screen recording are blocked on Android devices via FLAG_SECURE.

5. Data Storage and Third Parties

• User account data and progress are stored in our MongoDB database on a private server (43.134.172.69)
• Video content is stored on Cloudflare R2 (encrypted, inaccessible without authentication)
• Payment slips are stored on our private server and accessible only to administrators
• SMS OTP is delivered via Twilio — your phone number is used only for verification
• We do not sell or share your personal data with any third parties for marketing purposes

6. Data Retention

• Account data is retained while your account is active
• Watch progress is retained to allow you to resume lessons
• Payment slips are retained for administrative records
• You may request deletion of your account and all associated data at any time

7. Children's Privacy

SkillFlow is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13.

8. Contact Us

If you have any questions about this Privacy Policy or wish to request data deletion, please contact us:
LINE OA: @skillflow
Email: support@teeyai.in.th
Response time: Within 48 hours